ECCouncil Computer Hacking Forensic Investigator (V9) 312-49v9 Question # 115 Topic 12 Discussion

ECCouncil Computer Hacking Forensic Investigator (V9) 312-49v9 Question # 115 Topic 12 Discussion

312-49v9 Exam Topic 12 Question 115 Discussion:
Question #: 115
Topic #: 12

John is working as a computer forensics investigator for a consulting firm in Canada. He is called to seize a computer at a local web caf purportedly used as a botnet server. John thoroughly scans the computer and finds nothing that would lead him to think the computer was a botnet server. John decides to scan the virtual memory of the computer to possibly find something he had missed. What information will the virtual memory scan produce?


A.

It contains the times and dates of when the system was last patched


B.

It is not necessary to scan the virtual memory of a computer


C.

It contains the times and dates of all the system files


D.

Hidden running processes


Get Premium 312-49v9 Questions

Contribute your Thoughts:


Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.